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AMENDMENTS TO THE CLAIMS 

Please amend the claims as indicated hereafter (where underlining "_" denotes 
additions and strikethrough "-" denotes deletions). 
Claims: 

1.-71. (Canceled). 

72. (Currently Amended) A method of providing a terminal in a conditional 
access system with services, the method comprising the steps of: 

associating services with entitlement unit numbers, an entitlement unit number 
corresponding to a particular package of bundled services, wherein the 
entitlement unit number is carried with at least one encrypted control word 
in a payload of an entitlement control message (ECM); 

providing the terminal with an electronic program guide that associates universal 
service identification numbers to services; 

providing the terminal with an entitlement unit table that translates universal 
service identification numbers to entitlement unit numbers; and 

providing the terminal with an authorized entitlement unit number, wherein 
responsive to a user selecting a given service, the terminal determines 
whether the terminal is authorized to access the given service using the 
electronic program guide, the entitlement unit table, and the authorized 
entitlement unit number and displays the given service. 
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73. (Previously Presented) The method of claim 72, wherein the authorized 
entitlement unit number is provided to the terminal in an entitlement management 
message. 

74. (Previously Presented) The method of claim 72, wherein a given 
entitlement unit number is associated with a plurality of services. 

75. (Previously Presented) The method of claim 72, wherein the terminal is 
authorized for a first group of services, the first group of services having a first 
entitlement unit number, and further including the step of 

providing the terminal with a second authorized entitlement unit number, wherein 
the second authorized entitlement unit number is associated with a second 
group of services. 

76. (Previously Presented) The method of claim 75, wherein the given service 
is associated with both the first authorized entitlement unit number and the second 
authorized entitlement unit number. 
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77. (Previously Presented) The method of claim 72, further including the 
steps of 

providing the services in a stream of packets; and 

multiplexing entitlement control messages for a given service into the stream of 
packets, wherein each entitlement control message includes a second 
entitlement unit number, wherein the terminal confirms that the terminal is 
authorized to access the given service using the second entitlement unit 
number and the authorized entitlement unit number. 



78. (Previously Presented) The method of claim 77, wherein the entitlement 
control messages includes a plurality of entitlement unit numbers. 
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79. (Currently Amended) A method of providing a service to a terminal in a 
conditional access system, the method implemented at the terminal and comprising the 
steps of: 

receiving an electronic program guide that associates universal service 
identification numbers to services; 

receiving an entitlement unit table that translates universal service identification 
numbers to entitlement unit numbers, an entitlement unit number 
corresponding to a particular package of bundled services, wherein the 
entitlement unit number is carried with at least one encrypted control word 
in a payload of an entitlement control message (ECM); 

receiving an authorized entitlement unit number; 

receiving user input for a given service; 

determining whether the terminal is authorized to access the given service using 
the electronic program guide, the entitlement unit table, and the authorized 
entitlement unit number; and 

displaying the given service if the terminal is authorized to access it. 



80. (Previously Presented) The method of claim 79, wherein the authorized 
entitlement unit number is carried in an entitlement management message. 
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8 1 . (Previously Presented) The method of claim 79, further including the step 

of: 

storing the authorized entitlement unit number in a memory. 

82. (Previously Presented) The method of claim 8 1 , wherein the memory is 
included in a secure microprocessor having input/output terminals, and the secure 
microprocessor is characterized by the memory being unobservable at the input/output 
terminals. 
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83. (Currently Amended) The method of claim 79, responsive to determining 
that the terminal is authorized to access the given service, further including the steps of: 
receiving a stream of packets, the stream of packets including packets comprising 
the given service and entitlement control messages (ECMs) for the given 
service; 

responsive to determining that the terminal is authorized to access the given 

service, further including the steps of: 
parsing ECMs for the given service from the stream of packets, wherein each 

ECM includes an entitlement unit number that is carried in the payload of 

the ECM; 

confirming that the terminal is authorized to access the given service based upon 
the entitlement unit number and the authorized entitlement unit number; 

responsive to confirming that the terminal is authorized further including the steps 
ofi 

recovering the control words from the received ECMs; 

decrypting the given service using the recovered control words; and 

displaying the given service. 
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84. (Previously Presented) The method of claim 83, wherein the entitlement 
control messages includes a plurality of entitlement unit numbers, and the step of 
confirming that the terminal is authorized to access the given service further includes the 
step of: 

comparing each of entitlement unit numbers with the authorized entitlement unit 
number until one of the entitlement unit numbers matches the authorized 
entitlement unit number, wherein the terminal is authorized to access the 
given service if there is a match. 



